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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1. A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
3/21/2008 has been entered. 

2. Application was filed on 12-3-2003. Claims 1 - 3, 5 - 36 are pending. Claims 
1, 7 - 9, 13, 14, 18 - 20, 23, 24, 31, 38 have been amended. Claim 4 has been 
cancelled. Claims 1, 13, 24 are independent. 



Response to Arguments 

3. Applicant's arguments filed 3/21/2008 have been fully considered but they are moot 
due to new grounds of rejection. 

The double patenting rejection must remain until the Terminal Disclaimer is actually 
filed. Applicant's representative has stated in arguments dated 8-8-2007: "Applicants 
intend to file a terminal disclaimer when the double patenting rejection becomes final 
and when the claims of the present application are allowed." 



Double Patenting 

4. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent 
the unjustified or improper timewise extension of the "right to exclude" granted by a 
patent and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting 
claims are not identical, but at least one examined application claim is not patentabiy 
distinct from the reference claim(s) because the examined application claim is either 
anticipated by, or would have been obvious over, the reference claim(s). See, e.g., 
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In re Berg, 140 F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 1 1 
F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887. 225 USPQ 
645 (Fed. Cir. 1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); 
In re Vogel, 422 F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thohngton, 418 
F.2d 528, 163 USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321 (c) or 1 .321 (d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is 
shown to be commonly owned with this application, or claims an invention made as 
a result of activities undertaken within the scope of a joint research agreement. 

Effective January 1 , 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply 
with 37 CFR 3.73(b). 

4.1 Claims 1 - 36 are provisionally rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable over, 

claims 1 - 33 of copending Application No. 10/690,422; 

claims 1 - 33 of copending Application No. 1 0/849.090; and 

claims 1 - 33 of copending Application No. 10/994,010. 

This is a provisional double patenting rejection since the conflicting claims have 

not yet been patented. 

The subject matter claimed in the instant application is fully disclosed in the 
referenced copending applications and would be covered by any patent granted 
on that copending application since the referenced copending application and the 
instant application are claiming common subject matter, 

Claims of the instant application therefore are not patently distinct from the 
other application claims and as such are unpatentable over obvious-type double 
patenting. Later applications claims are not patentably distinct from earlier 
claims, if the later claims are anticipated by the earlier claim. 

4.2 Although the conflicting claims are not identical, they are not patentably distinct 
from each other, because the subject matter claimed in the instant application is 
fully disclosed in the referenced copending applications: 

claims 1, 5, 9, 10, 26, 30 of copending Application No. 10/690,422; 

claims 13, 30 of copending Application No. 10/849,090; and 

claims 1, 13 of copending Application No. 10/994,010, and would be covered by 

any patent granted on that copending application since the referenced copending 

applications and the instant application are claiming common subject matter. 



This is a provisional obviousness-type double patenting rejection. 



Application/Control Number: 10/728,023 
Art Unit: 2154 



Page 4 



Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which the subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

6. Claims 1 - 3, 5, 8 - 10, 13 - 16, 19 - 21, 24 - 27, 30 - 32, 35 - 36 are rejected 
under 35 U.S.C. 103(a) as being unpatentable over Gould et al. (US patent No. 
7,346,700) in view of Liu (US PGPUB No. 20050015455). 

Regarding Claims 1,13, Gould discloses a computer system for processing e-mail 
comprising: 

wherein servers that receive e-mail messages for a plurality of different remotely 
located clients (Gould col 8, 1 68 - col 9, 1 1: monitor email traffic of multiple users 
(clients)) , the plurality of server being part of a distributed network , wherein each 
packet sniffer is configured to extract originating IP addresses associated with e-mail 
messages that are communicated to the clients over the distributed network. (Gould 
col 4, II 59-62: parses (extract) information from e-mail message and obtains IP 
address of computer from which e-mail message originated (originating IP address)) 

Gould discloses wherein a central monitor (Gould col 2, II 31-40: email governor 
(central monitor); monitor email traffic from a specific IP address (originating IP 
address)) that communicates with the packet sniffers and that monitors data 
regarding the originating IP addresses, wherein the central monitor is configured to 
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determine whether traffic from an originating address has exceeded a threshold 
value (Gould col 3, II 47-51 : determine whether email message rate exceeds an 
email message rate threshold), the central monitor being further configured to 
generate a response to detect spam e-mail messages if the threshold value has 
been exceeded. (Gould col 2, II 44-47: take action when rate exceeds a 
predetermined limit (threshold)) 

Gould discloses wherein extracts originating IP addresses associated with e-mail 
messages that are communicated to the clients over the network. (Gould col 4, II 59- 
62: parses (extracts) information from e-mail message and obtains IP address of 
computer from which e-mail message originated (originating IP address)) Gould 
does not explicitly disclose a distributed network, a plurality of packet sniffers, and a 
plurality of servers. 

A distributed processing configuration is a well known in the art data processing 
configuration. And, Liu discloses a distributed processing configuration wherein: 

a) a plurality of servers, the plurality of servers being part of a distributed network; 

b) ajalurajjtyofgacj^ 

plurality of packets sniffer s correspo nds to and resides in a different server in the 
plurality of servers : c) distributed network with the plurality of packet sniffers; d) 

a server in which the central monitor resides, wherein the server is located 
separate from each of the packet sniffers in the plurality of packet sniffers in the 
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distributed network . (Liu Figure 1 (33); (9): one SPAM filter for each mail server; 
para 0038, li 13-14; para 041 , II 1-5; para 054, II 2-5: one SPAM filter (pack 
sniffer) for mail server; multiple servers; multiple SPAM filters (packet sniffers)) 
It would have been obvious to one of ordinary skill in the art to modify Gould to 
use a distributed processing configuration for e-mail processing system as taught by 
Liu. One of ordinary skill in the art would have been motivated to employ the 
teachings of Liu in order to share information that could be correlated to detect the 
signature of spammers and enable operation in a distributed architecture. (Liu col. 
9, lines 1 8-20: "... Conventional spam fillers in these prior art systems work in 
isolation, and do not share information that could be correlated to detect the 
signature of spammers. ...") 

Regarding Claim 2, Gould discloses the system of claim 1 : 

wherein each server checks the originating IP addresses of incoming connections. 

(Gould col 2, II 31-40: monitoring e-maii messaging; monitor and regulate the 
number of e-mail messages originating from an IP address; col 2, II 44-47: take 
action when rate exceeds a predetermined limit (threshold)) Gould does not 
explicitly disclose a blacklist containing IP addresses that have been determined to 
be generating spam e-mail messages, and rejecting any connection originating from 
an address on the blacklist. 

However, Liu discloses: 

a) each of the servers further includes a blacklist containing IP addresses that have 
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been determined to be generating spam e-mail messages; (Liu para 010, II 1-5; 
para 044, II 1-5: blacklist for IP addresses for spam) and 
b) each server checks the originating IP addresses of incoming connections to the 
addresses contained in the blacklist, and rejects any connection originating from 
an address on the blacklist. (Liu para 044, il 1-5: blacklist of !P addresses for 
spammers; messages from these senders will not be delivered) 
It would have been obvious to one of ordinary skill in the art to modify Gould to 
add the originating IP address to the blacklist as taught by Liu. One of ordinary skill 
in the art would have been motivated to employ the teachings of Liu in order to share 
information that could be correlated to detect the signature of spammers and enable 
operation in a distributed architecture. (Liu coi. 9, lines 18-20) 

Regarding Claim 3, Gould discloses the system of claim 1 wherein each of the servers 
further includes a message switch that determines whether e-mail messages are spam. 

(Gould coi 2, II 28-31: differentiating between legitimate e-mail and spam; monitoring the 
number of e-mail messages originating from an IP address), and communicates e-mail 
messages to clients. (Gould coi 3, H 18-21: if e-mail message rate does not exceed rate 
threshold; send e-mail message towards its destination) 

Regarding Claims 5, 16, 32, Gould discloses the system, method of claims 3, 13, 24 
further comprising: 

a) a spam database for storing rules for determining whether e-mail messages are 
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spam; (Gould coi 9, II 40-47: determination (rules) whether e-mail sent from 
originating SP address is spam) 
b) wherein the message switch determines whether e-mail messages are spam 
based on the rules within the spam database. (Gould col 2, 1 61 - col 3, 1 3: e- 

maii governor (switch, device, software) monitors and determines whether mail 
message is spam) 

Regarding Claims 8, 19, 35, Gould discloses the system, method of claims 1, 13, 24 
wherein the response generated by the central monitor (Gould coi 3, II 8-17: email 
governor (central monitor)) comprises an alert that is communicated to a spam analyst. 

(Gould col 3, II 8-14: email governor (central monitor); col 3, SI 23-26: send a message to 
service provider administrator (spam analyst)) 

Regarding Claims 9, 31, Gould discloses the system, method of claims 2, 30 (Gould 
col 2, II 31-40: monitoring e-mail messaging; monitor and regulate the number of e-mail 
messages originating from an IP address; col 2, II 44-47: take action when rate exceeds 
a predetermined limit (threshold)) and central monitor (Gould coi 3, II 8-17: email 
governor (central monitor)). Gould does not explicitly disclose a command to add the 
originating IP address to the blacklist. However, Liu discloses wherein the response 
generated by the monitor comprises a command to add the originating IP address to the 
blacklist. (Liu para 010, II 1-5; para 044, II 1-5: black list of known spammers; para 048, 
II 1-5: user interface (command) to edit (add entry to) the black list) 
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It would have been obvious to one of ordinary skiii in the art to modify Gould to add 
the originating IP address to the blacklist as taught by Liu. One of ordinary skill in the 
art would have been motivated to employ the teachings of Liu in order to share 
information that could be correlated to detect the signature of spammers and enable 
operation in a distributed architecture. (Liu col. 9, Sines 18-20) 

Regarding Claims 10, 21, 27, Gould discloses the system, method of claims 1, 13, 24 
wherein the threshold value comprises a rate parameter. (Gould col 2, II 31-40: 
monitoring e-mail messaging; monitor and regulate the number of e-mail messages 
originating from an IP address; col 2, II 41-43: check the rate at which e-mail messages 
originate from a specific IP address) 

Regarding Claim 14, Gould discloses the system of claim 13 wherein the central 
monitor (Gould col 3, II 8-17: email governor (central monitor)) resides on a server 
separate from the packet sniffers. (Gould Figure 1 ; col 4, II 32-35: email governor 
(central monitor); monitor and regulate number of e-mail messages originating from an 
IP address) 

Regarding Claims 15, Gould discloses the system of claim 13. (Gould col 2, II 31-40: 
monitoring e-mail messaging; monitor and regulate the number of e-mail messages 
originating from an IP address; col 2, II 44-47: take action when rate exceeds a 
predetermined limit (threshold)) Gould does not explicitly disclose a blacklist, and the 
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blacklist including SP addresses that have been determined to be generating spam. 
However, Liu discloses a blacklist stored on each server, the blacklist including IP 
addresses that have been determined to be generating spam. (Liu para 044, II 1-5: 
blacklist of IP addresses for spammers; messages from these senders will not be 
delivered) 

It would have been obvious to one of ordinary skill in the art to modify Gould to add 
the originating IP address to the blacklist as taught by Liu. One of ordinary skill in the 
art would have been motivated to employ the teachings of Liu in order to share 
information that could be correlated to detect the signature of spammers and enable 
operation in a distributed architecture. (Liu col. 9, lines 18-20) 

Regarding Claims 20, 36, Gould discloses the system of claims 13, 24 wherein the 
response generated by the central monitor comprises a command to the system to 
block future e-mail messages from the originating IP address. (Gould col 5, II 47-51 : e- 
mail governor (central monitor); coS 5, IS 56-58: block mail messages from email 
address) 

Regarding Claims 24, Gould discloses a method for processing e-mail and detecting 
spam e-mail messages, comprising: 

c) extracting originating IP addresses associated with e-mail messages that are 
communicated to the plurality of remotely located clients; (Gould col 4, 11 59-82; 
parse (extract) information from e-mail message and obtain IP address from 
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which the e-mail message originated) 

d) monitoring data regarding originating IP addresses; (Gould col 3, II 37-46: 
monitors the cumulative bytes of email messages from an IP address (originating 
IP address)) 

e) determining whether traffic from an originating IP address has exceeded a 
threshold value; (Gould col 5, II 46-51 : determines whether e-mail message rate 
exceed an email message rate threshold) 

f) generating, at a central monitor, a response for use in detecting spam e-mail 
messages if the threshold value has been exceeded. (Gould col 3, II 23-26: 
appropriate notification to administrator) 

Gould discloses routing the e-mail messages for a plurality of different remotely 
located clients, and communicating the processed messages to the plurality of 
remotely located clients. (Gould col 3, II 5-10; col 3, 1118-21: route e-mail, if e-mail 
message rate does not exceed threshold e-mail sent to its destination; col 8, 1 66 - 
col 7, 1 1 : traffic monitor traffic of all users (clients)) Gould does not explicitly 
disclose a distributed network including a plurality of servers that receive and 
process e-mail messages. 
However, Liu discloses: 

a) a distributed network including a plurality of servers that receive and process e- 
mail messages; (Liu Figure 1 (33); (9): one SPAM filter for each mail server; para 
0038, II 13-14; para 041, II 1-5; para 054, II 2-5: one SPAM filter (pack sniffer) for 
mail server; multiple servers; multiple SPAM filters (packet sniffers)) 
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b) use of the plurality of servers; (Liu coi 1 , N 32-41 : e-mail processing system 
Figure 1 ((33); (9)): one SPAM filter for each mail server; para 0038, II 13-14; 
para 041 , II 1-5; para 054, II 2-5: one SPAM filter (pack sniffer) for mail server; 
multiple servers; multiple SPAM filters (packet sniffers)) 
It would have been obvious to one of ordinary skill in the art to modify Gould to 
enable a distributed processing configuration for e-mail processing system as taught 
by Liu. One of ordinary skill in the art would have been motivated to employ the 
teachings of Liu in order to share information that could be correlated to detect the 
signature of spammers and enable operation in a distributed architecture. (Liu col. 
9, lines 18-20) 

Regarding Claims 25, Gould discloses the method of claim 24 further comprising: 
storing data regarding the originating IP addresses in a database. (Gould col 4, 1 63 - 
col 5, 1 3: datastore receives origination IP address and other e-mail metrics, spam and 
message store) 

Regarding Claims 26, Gould discloses the method of claim 24. 

checking addresses, and determining whether traffic from an originating IP address 
has exceeded a threshold. (Gould col 2, II 31-40: monitoring e-mail messaging; 
monitor and regulate the number of e-mail messages originating from an IP address; 
col 2, II 44-47: take action when rate exceeds a predetermined limit (threshold)) 
Gould does not explicitly disclose checking originating IP addresses against the list 



Application/Control Number: 10/728,023 Page 13 

Art Unit: 2154 

and determining whether traffic from an originating !P address has exceeded a 
threshold value only if the originating IP address is not in the list. 
However, Liu discloses: 

a) checking originating IP addresses against the list; (Liu para 044, II 1-5: blacklist of 
IP addresses for spammers; messages from these senders will not be delivered) 

b) determining whether traffic from an originating IP address has exceeded a 
threshold value only if the originating IP address is not in the list. (Liu para 044, II 
1-5: blacklist of IP addresses for spammers; messages from these senders will 
not be delivered) 

It would have been obvious to one of ordinary skill in the art to modify Gould to 
add the originating IP address to the blacklist as taught by Liu. One of ordinary skill 
in the art would have been motivated to employ the teachings of Liu in order to share 
information that could be correlated to detect the signature of spammers and enable 
operation in a distributed architecture. (Liu col. 9, lines 18-20) 

Regarding Claims 30, Gould discloses the method of claim 24. (Gould col 2, II 31-40: 
monitoring e-mail messaging; monitor and regulate the number of e-mail messages 
originating from an IP address; col 2, II 44-47: take action when rate exceeds a 
predetermined limit (threshold)) 

Gould does not explicitly disclose a blacklist. 
However, Liu discloses: 

a) storing IP addresses that have been determined to be generating spam in a 
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blacklist; (Liu para 044, II 1-5: blacklist of iP addresses for spammers; messages 
from these senders will not be delivered) 

b) checking originating IP addresses of incoming connections to the servers against 
the IP addresses contained in the blacklist; (Liu para 044, II 1-5: blacklist of IP 
addresses for spammers; messages from these senders will not be delivered) 

c) rejecting any connection originating from an IP address in the blacklist. (Liu para 
044, \\ 1-5: blacklist of IP addresses for spammers; messages from these 
senders will not be delivered) 

It would have been obvious to one of ordinary skill in the art to modify Gould to 
use a blacklist as taught by Liu. One of ordinary skill in the art would have been 
motivated to employ the teachings of Liu in order to share information that could be 
correlated to detect the signature of spammers and enable operation in a distributed 
architecture. (Liu col. 9, lines 18-20) 

7. Claims 6, 7, 17, 18, 33, 34 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Gould-Liu and further in view of Bandint et al. (US Patent No. 
7,117,358). 

Regarding Claims 6, 17, 33, Gould discloses the system, method of claims 5, 16, 32. 

(Gould col 2, II 31-40: monitoring e-mail messaging; monitor and regulate the number of 
e-mail messages originating from an IP address; co! 2, II 44-47: take action when rate 
exceeds a predetermined limit (threshold)) Gould does not explicitly disclose assigning 
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a score. However, Bandini discloses wherein each rule in the database is assigned a 
score that is used to determine whether an e-mail message is spam. (Bandini col. 4, 
lines 50-54; col. 4, lines 63-67: score used for ranking mail messages as spam) 

It would have been obvious to one of ordinary skill in the art to modify Gould to 
assign a score used in spam determination as taught by Bandini. One of ordinary skill 
in the art would have been motivated to employ the teachings of Bandini in order to 
eliminate the ability of spam to consume time and undermine a user's capacity to 
receive other, desirable messages. (Bandini col. 1 , lines 21-26: "... Reviewing the 
SPAM messages consumes time, which may be highly valuable in the case of 
workplace time, and may also undermine the user's capacity to receive other, desirable, 
messages. Accordingly, there is a need for a method that reduces the number of SPAM 
messages users receive. ...") 

Regarding Claims 7, 18, 34, Gould discloses the system, method of claims 6, 17, 33. 

(Gould col 2, II 31-40: monitoring e-mail messaging; monitor and regulate the number of 
e-mail messages originating from an IP address; col 2, II 44-47: take action when rate 
exceeds a predetermined limit (threshold)) Gould does not explicitly disclose raising the 
score of a rule. However, Bandini discloses wherein the response generated by the 
monitor comprises raising the score of a rule corresponding to the originating IP 
address. (Bandini col. 4, lines 48-52: update score) 

It would have been obvious to one of ordinary skill in the art to modify Gould to 
raising the score of a rule as taught by Bandini. One of ordinary skill in the art would 
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have been motivated to employ the teachings of Bandini in order to eliminate the ability 
of spam to consume time and undermine a user's capacity to receive other, desirable 
messages. (Bandini col. 1 , lines 21-26) 

8. Claims 11, 12, 22, 23, 28, 29 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Gould-Liu and further in view of Lewis et ai. (US PGPUB No. 
20030109248). 

Regarding Claims 11, 22, 28, Gould discloses the system, method of claims 1,13, 24. 

(Gould col 2, II 31-40: monitoring e-mail messaging; monitor and regulate the number of 
e-mail messages originating from an IP address; co! 2, II 44-47; take action when rate 
exceeds a predetermined limit (threshold)) Gould does not explicitly disclose a 
maximum total connections parameter. However, Lewis discloses wherein a maximum 
total connections parameter. (Lewis para 296, II 5-7; para 483, II 2-8: connections) 

If would have been obvious to one of ordinary skill in the art to modify Gould as 
taught by Lewis to use a maximum tola! connections parameter. One of ordinary skill 
in the art would have been motivated to employ the teachings of Lewis in order to 
enable the capability to utilize an improved customer interface for email processing. 
(Lewis para 009, II 1-7) 

Regarding Claims 12, 23, 29, Gould discloses the system, method of claims 1, 13, 24 
wherein the monitor determines whether an originating IP address has exceeded a 
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threshold value. (Gould col 2, II 31-40: monitoring e-mail messaging; monitor and 
regulate the number of e-mail messages originating from an IP address; col 2, II 44-47: 
take action when rate exceeds a predetermined limit (threshold)) Gould does not 
explicitly disclose maximum connections allowed parameter. However, Lewis discloses 
the use of a token bucket algorithm including a rate parameter and maximum 
connections allowed parameter. (Lewis para 296, II 5-7: para 483, II 2-8: connections, 
rate (per second)) 

It would have been obvious to one of ordinary skill in the art to modify Gould as 
taught by Lewis to use a maximum connections allowed parameter. One of ordinary 
skill in the art would have been motivated to employ the teachings of Lewis in order to 
enable the capability to utilize an improved customer interface for email processing. 
(Lewis para 009, II 1-7) 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to KYUNG H. SHIN whose telephone number is (571)272- 
3920. The examiner can normally be reached on 9:30 am - 6 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nathan J. FLYNN can be reached on (571) 272-1915. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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